various fixes, add flag to toggle selinux config